Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: EUoU3g37sK4FcUO5E4qWLZyCovkB6NJY5W0ibrkAsaw=
Subject key identifier: 66:49:FC:4A:E2:92:9C:0E:86:03:FF:31:CA:27:CD:A7:51:C4:53:CF
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 0196451FAC19CCB7334F9232560F715CFE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 08F5
Signing time: Thu 17 Apr 2025 19:00:25 +0000
Manifest this update: Thu 17 Apr 2025 19:00:25 +0000
Manifest next update: Fri 18 Apr 2025 19:00:25 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: W3j1JIoN4Nm0Usv7RObJcWzbEzMSsCXPPK6tFw7Yi5k=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:ac:19:cc:b7:33:4f:92:32:56:0f:71:5c:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Apr 17 19:00:25 2025 GMT
Not After : Apr 18 19:00:25 2025 GMT
Subject: CN=6649fc4ae2929c0e8603ff31ca27cda751c453cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:4c:da:15:e0:02:80:bb:a9:15:68:dd:48:
1b:6f:64:9e:d8:b0:63:b1:69:72:fb:2a:3e:7a:6f:
76:a2:68:ff:ff:6a:d1:56:1f:0e:9b:11:7e:a3:2c:
79:d1:f6:55:fb:55:31:02:c0:81:99:6e:b8:c5:cc:
23:4c:16:75:80:30:ac:5b:25:1f:23:44:5d:f3:df:
0b:0b:fe:8f:6d:ef:c6:32:5e:a4:7a:1b:d0:51:b3:
3c:36:6d:0c:21:dd:5c:4c:d1:da:b0:ae:6f:ab:d3:
17:87:1b:75:04:38:01:01:c7:0c:24:12:55:5f:e0:
64:08:fe:91:52:a3:c1:03:01:f3:70:3e:2f:f5:08:
2d:4d:01:6e:cc:62:48:a2:63:d1:6b:b7:74:ad:80:
51:2f:3a:f3:21:5f:65:e9:b3:d0:fe:09:44:34:36:
21:dc:e9:98:bf:e1:1b:eb:72:a8:f8:ac:07:de:a8:
6d:36:ef:ce:ad:35:c5:30:10:68:e1:cd:da:41:34:
87:4b:6c:6d:f1:af:39:ed:52:52:89:c6:a0:64:19:
11:11:a4:e2:91:a4:79:34:bd:14:05:be:53:4e:3d:
7d:23:b8:4c:3b:5b:26:2f:d8:b5:4b:88:75:ce:d2:
1d:af:bd:bd:fd:b7:b7:23:ce:fb:d3:bc:86:1b:ce:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:FC:4A:E2:92:9C:0E:86:03:FF:31:CA:27:CD:A7:51:C4:53:CF
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:17:66:da:75:99:c8:7b:86:21:0a:ae:d7:c0:fc:88:1d:5e:
01:23:75:4b:ea:da:a0:e6:18:3b:e5:b4:2c:eb:c2:d8:d2:a1:
f5:47:2d:3b:f1:0e:1b:b8:84:12:0a:9f:93:bc:e7:cf:3f:56:
00:d5:ae:de:19:c4:ed:6e:45:75:7d:9e:bf:07:61:30:46:2f:
76:26:f1:3b:7e:6a:c4:6e:08:c9:b0:47:a5:09:17:8c:47:47:
dc:ab:5d:c2:ea:bf:c7:02:81:6d:e6:e4:57:82:42:3f:1d:bb:
0e:aa:6d:3b:ea:41:65:c0:fc:14:1f:71:1d:4b:85:da:5f:ea:
34:84:df:70:a6:e2:d4:8c:08:b0:73:b8:d9:15:57:a9:c5:ce:
7e:ed:60:d8:c2:18:63:77:fc:95:2b:a0:b4:a3:ca:72:e2:a9:
f6:6d:15:f5:a5:04:53:02:b3:4e:5d:a5:6c:5a:63:71:1d:f1:
f9:31:64:96:3f:1e:f6:57:ff:1d:31:ba:80:7f:49:63:ab:c7:
a1:86:74:18:70:65:14:9d:aa:9c:42:3d:d7:05:f4:4d:ad:a1:
25:91:29:dd:d0:9c:20:6d:c3:df:62:ce:e1:62:3b:da:8c:91:
37:c0:58:a4:2c:16:ea:f6:8d:96:21:e4:9b:53:84:3b:64:2a:
d3:c7:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:21 2025 by rpki-client